Hi all. I just upgraded to 8.8.8 and installed patch1 on a multi-server staging environment on Oracle Linux 7.

Installation instruction says to install the patch on all nodes so I started from LDAP/Mailstore server and everythings went fine then I tried to install on my MTA/Proxy server and yum gave issues with dependencies:

For those who might be interested in customer service and support, we're now waiting for more than 5 (five) months for some patches for ZCS 8.6 (that is officially supported till end of September).

CVE-2018-6882 was discovered in January and not fixed in the patch released in February.It's actually fixed (since early April) but the fix is not released and not ETA.New vulnerabilities were discovered since, no information about 8.6 being at risk. Or not.